config/rootfiles/core/145/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2020 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 core=145
  28
  29 exit_with_error() {
  30         # Set last succesfull installed core.
  31         echo $(($core-1)) > /opt/pakfire/db/core/mine
  32         # force fsck at next boot, this may fix free space on xfs
  33         touch /forcefsck
  34         # don't start pakfire again at error
  35         killall -KILL pak_update
  36         /usr/bin/logger -p syslog.emerg -t ipfire \
  37                 "core-update-${core}: $1"
  38         exit $2
  39 }
  40
  41 # Remove old core updates from pakfire cache to save space...
  42 for (( i=1; i<=$core; i++ )); do
  43         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  44 done
  45
  46 # Remove files
  47
  48 # Stop services
  49 /etc/init.d/vnstat stop
  50 /etc/init.d/squid stop
  51 /etc/init.d/suricata stop
  52
  53 # Prepare OpenVPN for update
  54 /usr/local/bin/openvpnctrl -k
  55 /usr/local/bin/openvpnctrl -kn2n
  56
  57 # Extract files
  58 extract_files
  59
  60 # update linker config
  61 ldconfig
  62
  63 # update rng init
  64 rm /etc/rc.d/rc0.d/K45random
  65 rm /etc/rc.d/rc6.d/K45random
  66 mv /etc/rc.d/rc3.d/S00random /etc/rc.d/rcsysinit.d/S66random
  67 mv /etc/rc.d/rcsysinit.d/S92rngd /etc/rc.d/rcsysinit.d/S65rngd
  68
  69 # remove converted urlfilter database to force rebuilt
  70 rm -f /var/ipfire/urlfilter/blacklists/*/*.db
  71 rm -f /var/ipfire/urlfilter/blacklists/*/*/*.db
  72
  73 # remove packages that are included now in core
  74 for package in perl-DBI perl-DBD-SQLite; do
  75         rm -f /opt/pakfire/db/installed/meta-$package
  76         rm -f /opt/pakfire/db/meta/meta-$package
  77         rm -f /opt/pakfire/db/rootfiles/$package
  78 done
  79
  80 # Enable OpenVPN metrics collection
  81 sed -E -i /var/ipfire/ovpn/server.conf \
  82         -e "/^client-(dis)?connect/d"
  83
  84 cat <<EOF >> /var/ipfire/ovpn/server.conf
  85 # Log clients connecting/disconnecting
  86 client-connect "/usr/sbin/openvpn-metrics client-connect"
  87 client-disconnect "/usr/sbin/openvpn-metrics client-disconnect"
  88 EOF
  89
  90 # Start services
  91 /etc/init.d/vnstat start
  92 /etc/init.d/unbound restart
  93 /etc/init.d/suricata start
  94 /etc/init.d/squid start
  95
  96 # Start OpenVPN again
  97 /usr/local/bin/openvpnctrl -s
  98 /usr/local/bin/openvpnctrl -sn2n
  99
 100 # Update Language cache
 101 /usr/local/bin/update-lang-cache
 102
 103 # Filesytem cleanup
 104 /usr/local/bin/filesystem-cleanup
 105
 106 # This update needs a reboot...
 107 #touch /var/run/need_reboot
 108
 109 # Finish
 110 /etc/init.d/fireinfo start
 111 sendprofile
 112
 113 # Update grub config to display new core version
 114 if [ -e /boot/grub/grub.cfg ]; then
 115         grub-mkconfig -o /boot/grub/grub.cfg
 116 fi
 117
 118 sync
 119
 120 # Don't report the exitcode last command
 121 exit 0